CVE-2025-3928—Commvault Web Server Unspecified Vulnerability

漏洞名称

Commvault Web Server Unspecified Vulnerability

描述

Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attacker to create and execute webshells.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

其他说明

• https://documentation.commvault.com/securityadvisories/CV_2025_03_1.html
• https://www.commvault.com/blogs/notice-security-advisory-update
• https://nvd.nist.gov/vuln/detail/CVE-2025-3928

相关新闻文章

• Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom EspionageAugust 22, 2025
• CISA Warns of Suspected Broader SaaS Attacks Exploiting App Secrets and Cloud MisconfigsMay 23, 2025
• Commvault CVE-2025-34028 Added to CISA KEV After Active Exploitation ConfirmedMay 5, 2025
• Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure BreachMay 1, 2025
• Commvault says recent breach didn't impact customer backup dataApril 30, 2025